Plane: Cross-Tenant Destructive IDOR: Estimate Point Deletion via Unscoped Primary Key Lookup
CVE-2026-105629
Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate
#advisory
共收录 23210 条相关情报。
← 返回所有主题Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset Endpoint
CVE-2026-105628
Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avata
BuildKit improperly handles special files in build snapshots
CVE-2026-93320
BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special
Plane: Cross-tenant stored XSS in intake enables account takeover
CVE-2026-104979
Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes
Plane: Invitation Hijack in Project Join Flow via Missing Authorization and Email-Only Acceptance
CVE-2026-104978
Plane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list endpoint is accessible
Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOU
CVE-2026-104977
Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an
A malicious frontend can cause a daemon panic
CVE-2026-93319
A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data ra
Plane: SSRF in Gitea OAuth
CVE-2026-104976
Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and
Cache poisoning via unvalidated image layer DiffIDs
CVE-2026-93318
A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versio
Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpoints
CVE-2026-104975
Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/as
Container blob cache can accept unverified content
CVE-2026-93317
An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not ma
Plane: Disabled User Auto-Reactivation on Login
CVE-2026-104974
Plane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by setting is
Starting daemon with --cdi-disabled flag can lead to panic on specific builds
CVE-2026-93316
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This c
Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery
CVE-2026-104973
Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP address
Plane: Cross-Workspace Asset Duplication IDOR + WorkspaceFileAssetEndpoint and FileAssetEndpoint Missing Authorization
CVE-2026-104971
Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset witho
adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation
CVE-2026-102282
adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the
Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins
CVE-2026-104970
Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/li
Plane: Cross-Tenant Cycle Issue Hijack via IDOR
CVE-2026-104969
Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the re
Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/
CVE-2026-104968
Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=us
Plane: Cross-workspace association destruction and issue mutation/read via unscoped queries in BulkDeleteIssuesEndpoint and SubIssuesEndpoint
CVE-2026-104967
Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/